Intel Xeon d2700 Firmware vulnerabilities

2 CVEs affecting Intel Xeon d2700 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-0004, published 2022-05-12.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-33120, published 2022-02-09. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause…
• CVE-2022-0004, published 2022-05-12. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an unauthenticated user to potentially…